VULNERABILITY INTELLIGENCE

CVE-2013-0860

CVSS score4.3 MEDIUM
EPSS probability2.26%
CISA KEVNot currently listed
Published2013-11-23
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P

Description

The ff_er_frame_end function in libavcodec/error_resilience.c in FFmpeg before 1.0.4 and 1.1.x before 1.1.1 does not properly verify that a frame is fully initialized, which allows remote attackers to trigger a NULL pointer dereference via crafted picture data.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references